This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft File: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft (raw, json) Hash identifier: APBM5bxl29fDeARVZTU7W/oX+GCR6QXkrxXP2OFUGZs= Subject key identifier: 55:DA:67:1C:69:D4:8B:CA:38:8B:3C:E1:62:49:2E:AA:DE:2D:AC:F3 Authority key identifier: 7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 Certificate issuer: /CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Certificate serial: 680BCFB30452848B8C983833AAF2E62810093C66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft Manifest number: 0356 Signing time: Mon 22 Dec 2025 19:20:53 +0000 Manifest this update: Mon 22 Dec 2025 19:15:53 +0000 Manifest next update: Thu 25 Dec 2025 20:18:53 +0000 Files and hashes: 1: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: yN3b6aLARK75R5KMvUSuceVNjELLLGOMFIhCi2LU/yI=) 2: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: 18AbUsVhIGEQ6HCFJXdnQ22A4WQNqI+V6DxuOgi205k=) 3: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl (hash: HAFvnC5LJichi9UF6vZFsx2GOFl6zCr17xO6rSZZGxk=) 4: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: dQbf3sVA4jaVic2L+O9XI1H3j7ymjWLOW6r+meQnacg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0b:cf:b3:04:52:84:8b:8c:98:38:33:aa:f2:e6:28:10:09:3c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Validity Not Before: Dec 22 19:15:53 2025 GMT Not After : Dec 25 20:18:53 2025 GMT Subject: CN=55DA671C69D48BCA388B3CE162492EAADE2DACF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1e:e8:e3:99:46:29:e0:2f:66:a8:41:24:eb: 1d:44:1a:f4:12:a5:4c:04:53:ee:9f:fd:a7:df:cb: ae:7f:b2:db:48:4a:6a:55:21:95:a5:f8:b3:6f:88: f3:a6:9a:2f:50:f5:e5:47:4a:10:0e:74:00:ec:93: ce:bd:25:6d:f2:3f:a4:5e:10:26:0d:54:0f:fd:e0: ca:d0:90:bf:78:95:a8:bc:c6:e8:56:c4:8d:2b:35: 31:ee:c3:a9:72:da:4e:e0:b5:6d:cb:46:5c:38:e5: d4:a5:c2:04:59:41:ea:89:d2:8d:3b:a3:c4:f3:30: a0:60:bf:43:d7:21:88:8f:e0:ea:f9:56:b3:e2:16: 32:08:27:73:c6:30:06:cf:62:a4:1e:0a:48:b9:bf: e2:e0:7f:27:3f:14:f7:1d:79:ec:be:50:74:f2:9d: 12:04:2a:e7:8e:ec:01:aa:31:f2:c7:76:62:02:46: 53:65:83:56:ac:ea:f9:7a:27:09:17:cb:d2:ad:b6: 59:03:80:8e:d0:4c:c9:54:fc:9e:fe:1d:aa:6e:b6: be:47:83:fe:47:c7:29:b4:bd:a5:ea:bc:a1:11:42: 02:be:3a:7b:4d:eb:47:7d:31:36:7f:b1:83:4b:25: ab:52:f0:86:ba:4f:28:b9:17:c2:9d:c1:cd:64:b6: 8c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DA:67:1C:69:D4:8B:CA:38:8B:3C:E1:62:49:2E:AA:DE:2D:AC:F3 X509v3 Authority Key Identifier: keyid:7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f4:7c:4f:31:3c:24:ea:5f:58:32:1f:99:a1:d4:c9:c8:6e: 56:36:d9:4e:21:81:e8:bb:8d:ce:af:8c:aa:b5:1a:1c:87:79: 10:e2:09:ae:dc:bd:4f:5e:9b:a3:a1:6e:85:b1:e0:9d:fe:89: ca:a6:da:92:6a:41:14:59:94:3f:5a:ac:c2:91:ca:07:7c:50: 80:e3:24:8d:19:84:f5:51:65:6b:ba:60:2d:18:1d:30:72:e2: 16:5e:62:ca:84:9d:62:fa:0f:0f:b4:a1:d4:02:d0:f0:f1:a4: f4:a6:92:45:21:d8:ee:4f:83:49:dc:43:17:ba:09:14:21:9c: df:3b:a8:f8:6f:be:ba:cd:6c:53:59:73:47:c3:9c:6a:a0:db: 5f:07:71:ea:8a:f5:f5:21:56:93:0d:25:69:e3:9f:95:b1:40: 81:c6:c9:a3:1d:de:2c:36:14:7a:f4:b2:3a:63:2d:fe:c6:91: 5b:14:3d:cb:46:16:6d:62:d3:c9:48:8f:c0:cd:de:54:21:de: b5:14:d1:ce:09:09:3f:2e:60:5b:fa:bd:25:c8:c9:45:39:84: 8b:6d:1b:8e:82:c1:f9:31:fc:8c:c7:8b:4a:90:3d:ea:2d:aa: 1c:ed:d6:35:a1:15:41:10:c7:ac:85:04:a1:01:17:4d:7a:e4: d5:36:1d:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAvPswRShIuMmDgzqvLmKBAJPGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJE Qzk1RkFGNTAeFw0yNTEyMjIxOTE1NTNaFw0yNTEyMjUyMDE4NTNaMDMxMTAvBgNV BAMTKDU1REE2NzFDNjlENDhCQ0EzODhCM0NFMTYyNDkyRUFBREUyREFDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXHujjmUYp4C9mqEEk6x1EGvQS pUwEU+6f/affy65/sttISmpVIZWl+LNviPOmmi9Q9eVHShAOdADsk869JW3yP6Re ECYNVA/94MrQkL94lai8xuhWxI0rNTHuw6ly2k7gtW3LRlw45dSlwgRZQeqJ0o07 o8TzMKBgv0PXIYiP4Or5VrPiFjIIJ3PGMAbPYqQeCki5v+Lgfyc/FPcdeey+UHTy nRIEKueO7AGqMfLHdmICRlNlg1as6vl6JwkXy9KttlkDgI7QTMlU/J7+Haputr5H g/5Hxym0vaXqvKERQgK+OntN60d9MTZ/sYNLJatS8Ia6Tyi5F8Kdwc1ktoxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVdpnHGnUi8o4izzhYkkuqt4trPMwHwYDVR0j BBgwFoAUem5/45FS0cwXT2kiFD+q69yV+vUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTJjMTM4Yy0yZTI0LTQ5ZjUtOGFkYS0wMDI3Y2JhN2YxNzgvMC83QTZFN0ZFMzkx NTJEMUNDMTc0RjY5MjIxNDNGQUFFQkRDOTVGQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJEQzk1 RkFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFB RUJEQzk1RkFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADP0fE8xPCTqX1gyH5mh1MnIblY22U4hgei7 jc6vjKq1GhyHeRDiCa7cvU9em6OhboWx4J3+icqm2pJqQRRZlD9arMKRygd8UIDj JI0ZhPVRZWu6YC0YHTBy4hZeYsqEnWL6Dw+0odQC0PDxpPSmkkUh2O5Pg0ncQxe6 CRQhnN87qPhvvrrNbFNZc0fDnGqg218HceqK9fUhVpMNJWnjn5WxQIHGyaMd3iw2 FHr0sjpjLf7GkVsUPctGFm1i08lIj8DN3lQh3rUU0c4JCT8uYFv6vSXIyUU5hItt G46Cwfkx/IzHi0qQPeotqhzt1jWhFUEQx6yFBKEBF0165NU2HYQ= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:49 2025 by rpki-client